This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft File: bX2AV2xLO-av9DH40yM49x_fAd0.mft (raw, json) Hash identifier: L3lVb0U5GY5TxXE0inUx6gc9MgWKOQJU5GPb2O9Xfn4= Subject key identifier: AA:9A:A0:2E:C2:EB:D5:85:38:23:B7:3B:8F:57:F9:AD:53:C0:9D:FC Authority key identifier: 6D:7D:80:57:6C:4B:3B:E6:AF:F4:31:F8:D3:23:38:F7:1F:DF:01:DD Certificate issuer: /CN=A91FC1B8/serialNumber=6D7D80576C4B3BE6AFF431F8D32338F71FDF01DD Certificate serial: 0F05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft Manifest number: 0EFB Signing time: Sat 20 Dec 2025 17:19:11 +0000 Manifest this update: Sat 20 Dec 2025 17:19:10 +0000 Manifest next update: Sat 27 Dec 2025 17:19:10 +0000 Files and hashes: 1: bX2AV2xLO-av9DH40yM49x_fAd0.crl (hash: 9l3yODatoYXQF52nLIogcHteJ8mhscD6XgL3biNaScE=) 2: DA481A0CB61811F0ABB14C31C4F9AE02.roa (hash: T3+CRirqLtz1Ta4crR0HI+okuEb0BcJI1bh/9/iVPTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.crl rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3845 (0xf05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC1B8, serialNumber=6D7D80576C4B3BE6AFF431F8D32338F71FDF01DD Validity Not Before: Dec 20 17:19:10 2025 GMT Not After : Dec 27 17:19:10 2025 GMT Subject: CN=6946da8e-b0f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:aa:8d:b9:77:43:ab:1c:bb:c3:6c:1e:10:8f: d2:a5:fa:fb:b5:13:b9:0c:3d:c5:76:b7:3b:6c:a7: 8b:12:28:28:fd:15:fd:e5:0d:46:e4:71:f0:c1:95: 1f:9c:af:e5:19:01:0f:24:da:a1:05:22:2b:11:41: 74:cf:05:4c:54:38:93:da:70:28:16:26:46:49:95: 88:0a:94:c5:d2:f0:bc:6b:2b:ea:35:12:07:30:00: 9d:5b:12:cc:90:8a:74:bf:23:e3:bb:61:63:2f:3c: 1a:ce:d6:1c:54:73:50:db:3e:54:a9:b5:2f:10:4d: 1a:8e:fb:e4:b0:d9:6b:ba:82:b1:51:0a:e0:e4:f0: d9:7c:0c:59:e8:17:ab:8c:b7:e7:de:9a:aa:e0:c0: 24:da:ed:fe:dc:72:4b:05:2b:3f:83:b4:25:d6:b8: 32:7c:b4:d7:f4:eb:55:85:a2:6b:41:39:ed:44:f4: 6d:91:05:e7:99:03:f3:51:b6:25:1d:75:b6:b1:96: dc:5f:e6:d1:55:10:ae:c2:af:9a:a1:5a:de:19:3d: f3:a6:20:4b:45:92:e9:a9:50:2c:15:35:c0:2d:11: 38:25:4d:50:1b:58:f0:87:5f:02:ae:83:f4:a1:0b: f8:1a:33:2b:ee:ad:98:bb:8c:46:e9:18:8c:e4:6c: ca:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9A:A0:2E:C2:EB:D5:85:38:23:B7:3B:8F:57:F9:AD:53:C0:9D:FC X509v3 Authority Key Identifier: keyid:6D:7D:80:57:6C:4B:3B:E6:AF:F4:31:F8:D3:23:38:F7:1F:DF:01:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:40:6b:d3:e3:a3:9b:d4:5c:c3:dc:88:c8:b5:59:9c:e4:38: 27:67:41:93:3d:ab:d7:38:b0:65:b0:84:f1:b7:5d:34:22:c4: 92:ba:24:bc:b1:00:d3:5b:2b:49:40:01:ab:fe:17:f4:a6:cd: 07:34:4e:87:1f:47:f7:c0:bb:37:a6:4e:ea:22:c3:28:ae:86: 80:eb:0e:53:e4:f3:00:7d:a0:a4:cb:69:9a:d2:7a:ae:9b:d1: aa:7f:d8:b4:99:2b:56:74:a4:05:42:a7:88:41:6a:d2:29:60: 56:65:e6:9c:15:f7:ba:24:8b:05:a7:28:d5:b4:8a:7d:5b:95: a8:26:e7:99:38:b2:47:53:d6:f6:56:fc:e9:ec:e3:f6:42:c0: cd:58:7e:b6:04:b8:48:84:70:ca:17:be:4e:ce:bb:fa:b1:b5: c4:b3:fb:b5:3b:99:0e:9d:73:ee:da:8d:fd:0c:bc:5c:a2:ed: ed:95:58:9f:68:13:d5:7e:cc:76:c8:d4:e3:fc:b5:3d:24:f2: ad:d2:a2:91:23:71:ec:e3:8c:89:6b:ae:5f:6c:da:9f:ad:eb: 8b:43:f7:25:12:3c:4c:6a:9d:a1:ad:a6:77:5c:2c:c6:79:43: 0f:59:92:d4:1d:67:17:79:4e:54:f1:38:c4:bc:3a:9c:5c:e6: 60:16:9e:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMxQjgxMTAvBgNVBAUTKDZEN0Q4MDU3NkM0QjNCRTZBRkY0MzFGOEQzMjMzOEY3 MUZERjAxREQwHhcNMjUxMjIwMTcxOTEwWhcNMjUxMjI3MTcxOTEwWjAYMRYwFAYD VQQDDA02OTQ2ZGE4ZS1iMGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoaqNuXdDqxy7w2weEI/Spfr7tRO5DD3Fdrc7bKeLEigo/RX95Q1G5HHwwZUf nK/lGQEPJNqhBSIrEUF0zwVMVDiT2nAoFiZGSZWICpTF0vC8ayvqNRIHMACdWxLM kIp0vyPju2FjLzwaztYcVHNQ2z5UqbUvEE0ajvvksNlruoKxUQrg5PDZfAxZ6Ber jLfn3pqq4MAk2u3+3HJLBSs/g7Ql1rgyfLTX9OtVhaJrQTntRPRtkQXnmQPzUbYl HXW2sZbcX+bRVRCuwq+aoVreGT3zpiBLRZLpqVAsFTXALRE4JU1QG1jwh18CroP0 oQv4GjMr7q2Yu4xG6RiM5GzK6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqaoC7C 69WFOCO3O49X+a1TwJ38MB8GA1UdIwQYMBaAFG19gFdsSzvmr/Qx+NMjOPcf3wHd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzFCOC9GQkRFOTlGQTkw RkIxMUU5OTJENTk4N0ZDNEY5QUUwMi9iWDJBVjJ4TE8tYXY5REg0MHlNNDl4X2ZB ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JYMkFWMnhMTy1hdjlESDQweU00OXhfZkFkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzFCOC9GQkRFOTlGQTkwRkIxMUU5OTJENTk4N0ZDNEY5QUUwMi9iWDJBVjJ4TE8t YXY5REg0MHlNNDl4X2ZBZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTQGvT46Ob1FzD3IjItVmc5DgnZ0GTPavXOLBlsITxt100IsSSuiS8 sQDTWytJQAGr/hf0ps0HNE6HH0f3wLs3pk7qIsMoroaA6w5T5PMAfaCky2ma0nqu m9Gqf9i0mStWdKQFQqeIQWrSKWBWZeacFfe6JIsFpyjVtIp9W5WoJueZOLJHU9b2 Vvzp7OP2QsDNWH62BLhIhHDKF75Ozrv6sbXEs/u1O5kOnXPu2o39DLxcou3tlVif aBPVfsx2yNTj/LU9JPKt0qKRI3Hs44yJa65fbNqfreuLQ/clEjxMap2hraZ3XCzG eUMPWZLUHWcXeU5U8TjEvDqcXOZgFp4Z -----END CERTIFICATE-----Generated at Mon Dec 22 17:29:23 2025 by rpki-client